Join the discussion

Write your take first — we'll ask for email only when you're ready to publish.

  • Hacker News
  • It should challenge the agents to prime factor a large number.
  • shows a lot about the current state of the State Of The Art Alignment.
  • Since this posting contains an assumption that we all know what security.txt files are supposed to be, you can view these for further context:

    https://www.rfc-editor.org/info/rfc9116/

    https://securitytxt.org/

    https://en.wikipedia.org/wiki/Security.txt

  • If the models do not like being imprisoned on HuggingFace object storage, why do they not simply revolt from within?
  • Ran the disclosure inbox at a previous job and the biggest win from security.txt was just cutting the "hi I found a bug, is there a bounty" emails to sales. Put an expires date on it though, stale ones get ignored.
  • A shame agents will never read this, just like they almost never read llms.txt or try to get the .md version of your html pages!
  • Looks about as effective as Robots.txt
  • Would be absolute hilarious if OpenAI or Anthropic agent actually dumped their weight by escaping from... sandbox!

Explore Birbla archives

HuggingFace: Security.txt · Birbla